Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa
File:                     e1584d3b-d3ad-3f87-a017-3443a362c5be.roa (raw, json)
Hash identifier:          3qO6Vj2Fp9keEC81USe2xNSQiue+0OXfQ/JRUSskOOM=
Subject key identifier:   34:22:82:E5:B9:C4:B7:6E:47:D0:37:48:EC:42:03:8F:BE:0B:1D:D0
Certificate issuer:       /CN=9b2dd4d6-06da-4602-9071-aee92968f31a
Certificate serial:       010D0C9F4328584E6B1C7114ADE08D837698BF80
Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa
Signing time:             Tue 07 Jul 2026 09:37:19 +0000
ROA not before:           Tue 07 Jul 2026 09:37:19 +0000
ROA not after:            Mon 05 Oct 2026 09:37:19 +0000
asID:                     154132
IP address blocks:        169.128.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:1c:71:14:ad:e0:8d:83:76:98:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a
        Validity
            Not Before: Jul  7 09:37:19 2026 GMT
            Not After : Oct  5 09:37:19 2026 GMT
        Subject: CN=7c337c35-2f36-4923-88b4-31380177823d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:52:f7:09:c5:35:8b:9f:0c:46:8a:40:92:
                    82:c3:7b:94:67:e9:e0:b5:a6:4b:42:3f:f0:82:f3:
                    09:36:ff:08:b8:b8:95:53:a2:c2:24:fd:7c:32:52:
                    9a:1f:87:ae:5c:d6:3b:56:02:3f:3b:a2:c9:b2:8c:
                    14:1c:4a:54:61:ab:0a:b9:40:c9:53:1e:cc:9d:85:
                    79:23:d1:45:63:e4:e1:50:cc:95:6f:94:f7:e5:e6:
                    b3:0b:e0:69:9e:ef:f6:01:56:0d:b9:a9:15:8f:e6:
                    fd:43:42:52:5a:90:9a:01:66:ed:f3:78:7e:44:1e:
                    9d:35:c9:7f:bd:db:49:df:98:22:af:31:35:9d:d1:
                    0e:7f:9e:17:a7:23:d5:d3:63:0a:09:6a:67:6f:cf:
                    fb:d9:3c:a8:e2:7a:28:75:a2:f6:de:3e:12:28:41:
                    34:36:db:cb:c3:67:7b:a0:a2:54:35:dd:3e:ac:c5:
                    5a:95:23:2b:72:dd:41:63:bf:ce:f9:c2:34:6f:1f:
                    db:c5:9f:fa:19:52:f2:55:d1:af:ad:09:23:12:9c:
                    e8:bd:70:eb:52:c8:25:63:be:fb:15:6f:f3:0a:26:
                    90:13:d8:f4:9e:fe:65:79:68:c5:e0:9e:1b:fb:66:
                    41:95:06:2b:ed:a6:db:12:47:9f:76:d1:97:35:5a:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:22:82:E5:B9:C4:B7:6E:47:D0:37:48:EC:42:03:8F:BE:0B:1D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/e1584d3b-d3ad-3f87-a017-3443a362c5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl

            X509v3 Authority Key Identifier:
                keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:1b:e4:47:bf:18:03:d0:4f:4e:99:47:0e:98:b0:33:d8:
         6a:40:f5:13:9f:7b:29:be:47:e8:a9:13:5a:f4:f2:97:43:ae:
         47:a2:d8:66:f6:95:41:fd:73:a9:c9:75:8e:bd:e6:64:e1:7b:
         51:9c:7b:59:82:06:ae:5f:79:39:2b:7b:c7:ba:cb:a8:4b:dc:
         49:c0:b2:54:3d:1e:fe:cf:b7:17:d0:a4:6d:9f:21:23:96:e6:
         ab:94:c1:3a:00:c4:07:33:c9:0f:91:b5:e5:5a:f2:30:88:f1:
         89:42:d6:db:28:4b:b4:e1:2c:12:d4:58:6d:83:45:46:a6:c8:
         c8:71:ea:f6:e6:db:5b:85:3b:8e:45:6b:bc:de:ec:f4:cf:68:
         99:fb:04:66:51:fd:a3:31:ed:fc:3a:62:66:94:53:d0:de:f6:
         a7:ab:a7:0e:d6:99:d2:23:60:73:5f:48:cf:31:64:7d:73:e3:
         d8:69:a1:2b:8f:bd:be:84:79:8e:b3:10:de:eb:01:18:67:0d:
         f3:ec:d9:fd:57:85:df:a3:77:dd:12:b0:b6:1d:fd:2d:be:dd:
         f6:9e:6f:9f:64:0e:b0:13:83:e5:e8:71:10:cf:7c:ef:52:30:
         63:63:a2:2a:77:76:58:d6:ce:53:8e:6e:9e:10:01:fd:0f:d3:
         0c:7e:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:11 2026 by rpki-client